Malware

How to remove “Application.Johnnie.18”?

Malware Removal

The Application.Johnnie.18 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.Johnnie.18 virus can do?

  • Presents an Authenticode digital signature
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Queries information on disks, possibly for anti-virtualization

Related domains:

query.run456.com

How to determine Application.Johnnie.18?


File Info:

crc32: D9F8225D
md5: 65a08325e6e152be4f1ee45f9baf11dd
name: Gamestart.exe
sha1: 057960b02b6233791afbcfe7d93ff975be686145
sha256: 7de9debcd81469f33c23c43b54693dd25cdf19af14e79928e6c5e95adaa6e207
sha512: 34a7067064499d195f86c4c3972d986cef144a6c058d7bf2ad8d9c53874dd6776889e0edde778027b47476316796cd9c68d81b22503c524c7f927505b3a59c30
ssdeep: 24576:z+mjHoUrRXWw+XnhfoxdVuy0lcLVPrRBAinGVzKqgQNtVGklmTr4uESmiyCK:imkUrRW6uy0sfmfvNtVGk4Tr4uESnU
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2015
InternalName: x6e38x620fx5b89x88c5x7a0bx5e8f
FileVersion: 2.3.0.290
ProductName: x6e38x620fx5b89x88c5x7a0bx5e8f
ProductVersion: 2.3.0.290
FileDescription: x6e38x620fx5b89x88c5x7a0bx5e8f
OriginalFilename: setup.exe
Translation: 0x0804 0x04b0

Application.Johnnie.18 also known as:

BkavW32.HfsAdware.46CC
MicroWorld-eScanGen:Variant.Application.Johnnie.18
FireEyeGeneric.mg.65a08325e6e152be
McAfeeArtemis!65A08325E6E1
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
BitDefenderGen:Variant.Application.Johnnie.18
Cybereasonmalicious.5e6e15
SymantecML.Attribute.HighConfidence
AvastWin32:Adware-gen [Adw]
GDataGen:Variant.Application.Johnnie.18
Kasperskynot-a-virus:AdWare.Win32.Kuaiba.ccx
AlibabaAdWare:Win32/Kuaiba.29b7271b
NANO-AntivirusTrojan.Win32.Kuaiba.ezjzwh
ViRobotAdware.Kuaiba.1695664
RisingPUA.Kuaiba!8.F612 (CLOUD)
Endgamemalicious (high confidence)
EmsisoftGen:Variant.Application.Johnnie.18 (B)
F-SecureAdware.ADWARE/Kuaiba.usimn
DrWebTrojan.DownLoader25.64337
ZillyaAdware.Kuaiba.Win32.448
Invinceaheuristic
McAfee-GW-EditionArtemis!PUP
SophosGeneric PUA AF (PUA)
JiangminAdWare.Kuaiba.bm
MaxSecureTrojan.Malware.11691807.susgen
AviraADWARE/Kuaiba.usimn
WebrootW32.Adware.Gen
MAXmalware (ai score=96)
Antiy-AVLGrayWare[AdWare]/Win32.Kuaiba
ArcabitTrojan.Application.Johnnie.18
ZoneAlarmnot-a-virus:AdWare.Win32.Kuaiba.ccx
MicrosoftPUA:Win32/Kuaiba
VBA32BScope.Trojan.Downloader
Ad-AwareGen:Variant.Application.Johnnie.18
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Adware.Kuaiba.G
TrendMicro-HouseCallTROJ_GEN.R002H0CHP19
TencentMalware.Win32.Gencirc.10b72c78
YandexPUA.Kuaiba!
SentinelOneDFI – Suspicious PE
eGambitUnsafe.AI_Score_99%
FortinetRiskware/Kuaiba
AVGWin32:Adware-gen [Adw]
Paloaltogeneric.ml

How to remove Application.Johnnie.18?

Application.Johnnie.18 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment